{"api_version":"v1","generated_at":"2026-10-08T21:45:00+00:00","product":{"cve_count":2,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-collective-icalendar-11091a02b486","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/icalendar","name":"icalendar","next_cursor":null,"observations":[{"affected":"icalendar: >= 6.1.0, < 7.2.2","affected_versions_present":true,"cve_id":"CVE-2026-77399","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-77399","fixed":"7.2.2.","last_modified":"2026-09-23T14:36:47.671Z","patch_url":"https://github.com/collective/icalendar/security/advisories/GHSA-qjcq-q7h7-r74v","primary_source":"","published":"2026-09-22T18:58:56.647Z"},{"affected":">= 7.1.0, < 7.1.3","affected_versions_present":true,"cve_id":"CVE-2026-55099","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55099","fixed":"7.1.3.","last_modified":"2026-08-26T15:05:26.062Z","patch_url":"https://github.com/collective/icalendar/security/advisories/GHSA-cv84-9p8j-fj68","primary_source":"","published":"2026-08-25T19:27:02.236Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"collective"}}